Re: Protecting database from administrators

From: Mark Allison (marka_at_no.tinned.meat@mvps.org)
Date: 03/29/04

  • Next message: Mark Allison: "RE: Prevent direct connections" 
    Date: Mon, 29 Mar 2004 02:11:07 -0800

    ZSL,

    If you are deploying a database to a client and the client will be administering the server, then you are trusting the client with the database. If the client did not have access to the database, they would not be able to maintain their own infrastructure. Now, only trusted people at the client site who know what they are doing should have this access (ie DBAs, or LAN Admins). I agree with Stephen's comments in that it is a process issue, not technology.

    Regular users of the database can be secured by only allowing them access through an application, using stored procs, etc.. 

    --
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
  • Next message: Mark Allison: "RE: Prevent direct connections"

    Relevant Pages

    • Re: Setting database size
      ... ALTER DATABASE Amol ... This would expand the database Amol, logical file Amol_data to 5TB (assuming ... Mark Allison, SQL Server MVP ... >> Mark Allison, SQL Server MVP ...
      (microsoft.public.sqlserver.setup)
    • Re: Encrypted Stored Proc
      ... >SQL Server MVP ... >> Is there an easy way to identify how many stored procs ... >> encrypted in a database? ... >> TIA. ...
      (microsoft.public.sqlserver.programming)
    • Re: Database last used?
      ... Mark Allison, SQL Server MVP ... Looking for a SQL Server replication book? ... > I have a database which I believe is redundant but I want to be sure before ...
      (microsoft.public.sqlserver.server)
    • Dynamic SQL in Stored Proc
      ... I have a database setup so that NO users have READ, ... Dynamic SQL and they have stopped working. ... error message when executing one of the stored procs. ...
      (microsoft.public.sqlserver.security)
    • Re: find out a user/account permission...
      ... quotenameAS ObjectName ... else 0 end) as 'CREATE DATABASE' ... Mark Allison, SQL Server MVP ... > my company remove any email attachment from outside automatically. ...
      (microsoft.public.sqlserver.server)